W3C home > Mailing lists > Public > public-html@w3.org > May 2009

RE: HTML interpreter vs. HTML user agent

From: Andi Sidwell <andi@takkaria.org>
Date: Sun, 31 May 2009 22:39:31 +0100
Message-ID: <4A22F913.2070301@takkaria.org>
To: public-html@w3.org
Larry Masinter wrote:
> Not sure I understand -- does web mail have to turn off scripting?
> Is the only HTML that is suitable for transmission by email to
> a web mail user one that doesn't rely on scripting?
> How can I email HTML which uses <canvas>, if scripting is turned
> off for web mail users?

I would suggest the only safe thing for webmail to do would be to parse 
the HTML document in question and whitelist elements that are known to 
be safe.  As a result, <canvas> would (hopefully) not work.

Received on Sunday, 31 May 2009 21:39:14 UTC

This archive was generated by hypermail 2.3.1 : Thursday, 29 October 2015 10:15:46 UTC